Auto Hide Page Chrome extension security report

Auto Hide Page Chrome Extension Auto Hide Page is a privacy utility that instantly disguises chosen websites with realistic “System Error” decoy screens. Instead of scrambling to close tabs when someone walks by, your page can be hidden in a click (or automatically) and unlocked with your password when you’re ready. What it does When a protected site is opened, Auto Hide Page overlays the content with a convincing, randomized error screen (e.g., “503 Service Unavailable”, “DNS Failure”, “Connection Lost”). To anyone glancing at your screen, it looks like the site is down — but you can restore access with your master password. How to Use Set your Master Password Open the extension popup and create your password. Add sites to Always On (optional) Add domains you want automatically hidden. Browse normally Visiting a protected domain triggers a decoy error overlay. Unlock when needed Use the unlock flow (e.g., “Reload/Unlock” on the decoy) and enter your password to restore the page. Use the Timer for temporary access Enable a timed window where protected pages are visible, then automatically re-hide. Key Features Realistic Decoy Error Screens Replaces page content with randomized “system error” overlays Multiple variants to look natural and believable (not repetitive) Master Password Protection Set a master password to unlock hidden tabs Optional recovery code support (if enabled in settings) Hidden pages cannot be revealed without authentication Always-On Automatic List (Domain Based) Add domains (e.g., youtube.com, reddit.com) to your Always On list The extension hides those sites automatically on visit Temporary Access Timer Need a short break? Start a timer (e.g., 5 or 10 minutes) All protected pages are temporarily unhidden Protection automatically re-enables when the timer ends Dark Mode Support Decoy screens and settings UI support dark mode Manual “Hide This Tab” Instantly hide the current tab from the popup Useful for one-off pages that aren’t in your Always On list Privacy Your data stays local Password and settings are stored locally in your browser No tracking, no analytics, no remote servers The extension does not sell, share, or transmit browsing history Permissions & Why They’re Needed (Chrome Web Store Review-Friendly) storage Purpose: Save settings locally Why needed: Stores your master password (or its protected form), Always On domain list, timer state, and UI preferences (like dark mode). activeTab Purpose: Manual hiding on the current page Why needed: Allows you to use the popup action (“Hide this Tab”) on the page you’re currently viewing, without needing broader access than necessary. tabs Purpose: Detect navigation and manage hidden state per tab Why needed: Monitors tab URL changes to apply hiding rules for the Always On list, and sends hide/unhide messages to the correct tab when needed. alarms Purpose: Temporary Access Timer Why needed: Runs a background timer so that when your temporary access window expires, protected pages automatically return to hidden mode. Host permissions: <all_urls> Purpose: Apply hiding to the domains you choose Why needed: Lets the extension detect when you visit a site from your Always On list and apply the decoy overlay immediately on page load across any website you choose to protect. scripting Purpose: Show the decoy overlay and password prompt Why needed: Injects the decoy UI (content script + CSS) into protected pages to render the error screen and handle unlock interaction. Remote code Not used Statement: The extension does not load or execute remote code. All scripts are packaged inside the extension. Perfect For Keeping surprises (gifts, plans, bookings) private in shared spaces Discreet browsing in offices, coworking, or open environments Locking distracting sites behind a password for focus and productivity